The healthcare regulatory landscape is not merely evolving; it is undergoing a rapid, multifaceted transformation. For telehealth founders, brick-and-mortar practice owners expanding nationally, and compliance officers, staying ahead of this curve is not just good practice—it is essential for survival and sustainable growth. The past few weeks have underscored this reality, with a flurry of activity from federal agencies and state boards alike, signaling a new era of heightened scrutiny and refined compliance expectations across the industry.
For more on this topic, see our analysis: The Compliance Crucible: Navigating Intensified Enforcement and Evolving Telehealth Regulations.
This edition of the TrueEval Industry Digest synthesizes the most impactful developments, offering a strategic overview of the compliance challenges and opportunities facing your practice. From the tightening grip on corporate practice of medicine to the nuanced world of telehealth billing and DEA oversight, we dissect what these changes mean for your operational models and future planning.
For more on this topic, see our analysis: The Compliance Crucible: Navigating Intensified Enforcement and Evolving Telehealth Regulations.
Federal Agencies Intensify Enforcement: DOJ and DEA Take Aim
The Department of Justice (DOJ) continues its aggressive pursuit of fraud and kickback schemes within the telehealth sector, a trend that carries critical impact for virtually all healthcare businesses. The DOJ's sustained focus is a clear message: the rapid expansion of telehealth, while beneficial, has also created new avenues for fraudulent activity, prompting heightened scrutiny. Enforcement actions are targeting arrangements that incentivize referrals through illegal kickbacks, often disguised as marketing fees, administrative services, or consulting agreements. This means any financial relationship with lead generators, laboratories, pharmacies, or other service providers must be meticulously structured to comply with the Anti-Kickback Statute (AKS) and its safe harbors. Failure to do so can result in criminal charges, civil penalties under the False Claims Act (FCA), and exclusion from federal healthcare programs.
For telehealth brands, the primary risk areas include billing for services not rendered, medically unnecessary services, or services provided by unqualified personnel. Medspas, dental practices, and chiropractic offices integrating telehealth components or engaging in referral relationships are equally under the microscope. For instance, a medspa offering weight-loss or hormone-therapy services via telehealth must ensure all prescriptions are medically necessary and not influenced by illegal inducements. The DOJ's enforcement often targets schemes where providers are paid for ordering unnecessary items or services, even if they claim to be acting on behalf of a telehealth company.
Simultaneously, the Drug Enforcement Administration (DEA) is heightening scrutiny on online prescribing of controlled substances, particularly in the context of medications like GLP-1s, even though GLP-1s themselves are not controlled substances. This signals a renewed emphasis on the Ryan Haight Act and its exceptions, requiring practitioners to ensure legitimate medical purpose and patient safety in virtual care settings. This means a critical re-evaluation of prescribing protocols for any controlled substance. Relying solely on online questionnaires or brief video consultations for initial controlled substance prescriptions will likely draw regulatory attention. Companies must ensure robust patient evaluation processes, including comprehensive medical histories, physical examinations (or documented exceptions), and appropriate diagnostic testing, even if conducted virtually within current flexibilities. For medspas and longevity clinics, this trend necessitates a review of their prescribing practices, ensuring that all controlled substance prescriptions are medically necessary and based on a legitimate patient-provider relationship.
The Resurgence of Corporate Practice of Medicine (CPOM) Enforcement
State-level enforcement of Corporate Practice of Medicine (CPOM) doctrines remains a critical impact area, particularly for the burgeoning Direct-to-Consumer (DTC) telehealth weight loss brands and medspas. States like Ohio (OH) and others such as California (CA), Texas (TX), New York (NY), and Illinois (IL) maintain strict CPOM doctrines, prohibiting corporations and non-licensed individuals from employing physicians or controlling medical practice. This regulatory framework significantly impacts operational structures, demanding careful compliance to avoid legal and licensure repercussions.
For telehealth brands, this necessitates compliant structures such as a Management Services Organization (MSO) model. Under an MSO arrangement, the non-licensed entity provides administrative, technical, and non-clinical support services to a professional medical corporation (PC) or professional limited liability company (PLC) owned and controlled by licensed physicians. Crucially, the MSO cannot dictate clinical decisions, set professional fees, or interfere with the physician's independent medical judgment. Contracts must clearly delineate the separation of clinical and administrative responsibilities.
Medspas face similar scrutiny. While many medspa services (e.g., injectables, laser treatments) are considered the practice of medicine and must be performed or supervised by a licensed physician, the ownership and management structure of the medspa itself is critical. A non-physician cannot own a medical practice that provides these services. Therefore, medspas must either be physician-owned or operate under an MSO model where clinical services are provided by a separate, physician-owned professional entity. Failure to comply can lead to severe penalties, including civil penalties, injunctions, disgorgement of profits, and even criminal charges for the unlicensed practice of medicine.
State Boards Refine Supervision, Delegation, and Prescribing Rules
State medical and pharmacy boards are actively refining their regulations, creating a patchwork of requirements that demand meticulous attention. The Washington State Medical Commission (WMC) and Nursing Care Quality Assurance Commission (NCQAC) have clarified supervision and delegation requirements for PAs and NPs in telehealth and medspa settings, marking a high impact development. This means merely having a supervising physician or collaborating ARNP on paper is insufficient. The regulations demand a robust, documented process for ongoing collaboration, review of patient charts, and availability for consultation. Medspas, in particular, must maintain meticulous records of delegation agreements, training, and ongoing supervision, especially for procedures involving injectables, lasers, or other advanced modalities.
Similarly, the District of Columbia (DC) Pharmacy Board and the Connecticut (CT) Pharmacy Board have issued specific regulations governing telehealth prescribing, compounding, and fulfillment compliance. These rules emphasize patient-provider relationships, prescription requirements, and pharmacy responsibilities, including for compounded medications. For telehealth providers, this means ensuring initial consultations meet the standards for establishing a bona fide patient-practitioner relationship before prescribing. For medspas and other practices utilizing compounded medications, strict adherence to USP standards and state-specific compounding regulations is non-negotiable. Partnering with pharmacies licensed in these states and compliant with their stringent guidelines is crucial.
The Enduring Complexity of Informed Consent and Billing
Navigating telehealth informed consent requirements across all 50 states and D.C. remains a critical impact area. There is no single federal standard, necessitating a meticulous, state-by-state approach. Telehealth platforms must integrate dynamic consent workflows that can present state-specific disclosures, covering aspects like technology failures, data privacy, and the scope and limitations of virtual care. Regular review and updates are essential as state regulations continuously evolve.
Finally, telehealth billing and coding compliance for commercial insurance and self-pay models continues to be a critical impact challenge. Providers must meticulously adhere to complex regulations, requiring accurate CPT/HCPCS codes, appropriate modifiers (e.g., -95, -GT, -GQ, -G0), correct place of service (POS) indicators (e.g., 02 for telehealth, 10 for patient's home), and transparent pricing for self-pay patients. Missteps can lead to claim denials, recoupments, audits, and severe penalties, including False Claims Act violations. For self-pay models, the No Surprises Act mandates good faith estimates, requiring clear, upfront pricing for all services. Robust internal controls, staff training, and regular audits are indispensable for mitigating these risks.
What This Means For Your Practice
The current regulatory environment demands a proactive and comprehensive compliance strategy. Here are actionable steps for your practice:
- Audit Your Corporate Structure: If operating in states with strict CPOM, review your MSO agreements, physician employment contracts, and revenue-sharing models. Ensure physician independence and clinical autonomy are unequivocally preserved.
- Strengthen Supervision Protocols: For practices utilizing PAs and NPs, especially in telehealth and medspa settings, document robust supervision and delegation agreements. Implement systems for ongoing collaboration, chart review, and competency assessment, aligned with state board requirements.
- Refine Prescribing Practices: For any practice prescribing medications, particularly controlled substances or compounded drugs, review your patient assessment protocols, documentation standards, and pharmacy partnerships. Ensure compliance with federal DEA guidelines and state pharmacy board regulations, including those for establishing a bona fide patient-provider relationship.
- Tailor Informed Consent: Move beyond generic consent forms. Implement dynamic systems that deliver state-specific informed consent disclosures, capturing all mandated elements for each jurisdiction where you operate and where your patients reside.
- Optimize Billing and Coding: Invest in continuous training for your billing teams. Stay updated on payer-specific policies, correct CPT/HCPCS codes, modifiers, and POS indicators. For self-pay, ensure transparent pricing and compliance with good faith estimate requirements.
- Vendor Due Diligence: Scrutinize all third-party vendor relationships, especially those involving marketing, lead generation, or administrative services, to ensure they do not create illegal kickback arrangements. Ensure compensation is fair market value and commercially reasonable.
The regulatory landscape is a dynamic force, constantly reshaped by legislative action, enforcement trends, and technological advancements. TrueEval remains committed to providing you with the intelligence and tools necessary to navigate this complexity, ensuring your practice not only complies but thrives. Staying informed and agile is your greatest asset in this evolving compliance crucible.
Further Reading
- The Compliance Crucible: Navigating Intensified Enforcement and Evolving Telehealth Regulations
- TrueEval Regulatory Intelligence Briefing: Navigating the Shifting Sands of Telehealth Compliance, CPOM, and Enforcement
- The Compliance Crucible: Navigating Heightened Enforcement and Evolving Telehealth Mandates
- Medspa Expansion: Navigating the Regulatory Labyrinth for Compliant Growth
